title: Managing personal health information in distributed research network environments.
abstract: BACKGROUND
  Studying rare outcomes, new interventions and diverse populations often requires collaborations across multiple health research partners. However, transferring healthcare research data from one institution to another can increase the risk of data privacy and security breaches.
  
  
  METHODS
  A working group of multi-site research programmers evaluated the need for tools to support data security and data privacy. The group determined that data privacy support tools should: 1) allow for a range of allowable Protected Health Information (PHI); 2) clearly identify what type of data should be protected under the Health Insurance Portability and Accountability Act (HIPAA); and 3) help analysts identify which protected health information data elements are allowable in a given project and how they should be protected during data transfer. Based on these requirements we developed two performance support tools to support data programmers and site analysts in exchanging research data.
  
  
  RESULTS
  The first tool, a workplan template, guides the lead programmer through effectively communicating the details of multi-site programming, including how to run the program, what output the program will create, and whether the output is expected to contain protected health information. The second performance support tool is a checklist that site analysts can use to ensure that multi-site program output conforms to expectations and does not contain protected health information beyond what is allowed under the multi-site research agreements.
  
  
  CONCLUSIONS
  Together the two tools create a formal multi-site programming workflow designed to reduce the chance of accidental PHI disclosure.
authors.affiliation: Mid-Atlantic Permanente Research Institute, Kaiser Permanente Mid-Atlantic States, Rockville, MD, USA. Christine.E.Bredfeldt@kp.org.
authors.forename: Christine E
authors.initials: CE
authors.lastname: Bredfeldt
authors.forename: Amy L
authors.initials: AL
authors.lastname: Butani
authors.forename: Roy
authors.initials: R
authors.lastname: Pardee
authors.forename: Paul
authors.initials: P
authors.lastname: Hitz
authors.forename: Sandy
authors.initials: S
authors.lastname: Padmanabhan
authors.forename: Gwyn
authors.initials: G
authors.lastname: Saylor
mesh_terms: D016494:Computer Security / Q000295:instrumentation / Q000331:legislation & jurisprudence / Q000592:standards; D003219:Confidentiality / Q000331:legislation & jurisprudence / Q000592:standards*; D016208:Databases, Factual / Q000331:legislation & jurisprudence / Q000592:standards*; D063025:Health Information Management / Q000295:instrumentation / Q000331:legislation & jurisprudence / Q000592:standards*; D020408:Health Insurance Portability and Accountability Act; D006801:Humans; D015337:Multicenter Studies as Topic / Q000295:instrumentation / Q000331:legislation & jurisprudence / Q000592:standards*; D012984:Software / Q000592:standards*; D014481:United States